SecureLeap gives startups a virtual CISO and gets them SOC 2 and ISO 27001 ready, with manual penetration testing when buyers or auditors ask for it. We work with seed to Series B startups in the US, UK and EU from Porto, Portugal.
Virtual CISO (vCISO) A senior security leader who owns your security program without a full-time hire. Navigator (security guidance, risk assessment, roadmap, and policies written and maintained) starts at $2,500 or €2,500 a month on a 12-month retainer. Co-Pilot adds security questionnaires, vendor reviews, and a security leader for your audits and customer calls; Captain adds your board. Both are quoted to your needs.
SOC 2 consulting From kickoff to a SOC 2 Type 1 report in 3 to 4 months. We scope the criteria, write the policies, spec every fix for your engineers, and manage the independent CPA firm. Gap Assessment: $3,995 fixed, 2 to 3 weeks. Audit Ready and All-In (pentest and auditor's fee on one invoice) are quoted after a scoping call.
ISO 27001 consulting ISMS scope, risk assessment, Statement of Applicability, Annex A controls, internal audit, management review, and certification body management. Most startups are ready for the certification audit in 6 to 9 months.
Penetration testing Manual black, gray and white box testing of web apps, APIs, mobile and cloud by certified testers (OSCP, eWPTX, CPENT). Reports are accepted as SOC 2 and ISO 27001 audit evidence, and retests within 60 days are included. Manual tests from €3,999.
Compliance automation Vanta, Drata and Secureframe licenses at a 20% partner discount, with setup included.
Founded by Marçal Santos (CISM, CDPSE) Former Director of Information Security at Aircall and BISO at Citibank, with 30+ SOC 2 audits led across his career.
Book a free 30-minute call: https://cal.com/marcal-santos-qx8l0j/30min
Secureleap is noted for providing good value for cost, delivering projects on time and within budget. Clients appreciate their expertise and proactive approach, often highlighting the affordability of their services and the alignment with client needs.
Secureleap is praised for its deep expertise in compliance and security services, including SOC 2 Type II audits and GDPR compliance. Clients appreciate their ability to navigate complex regulatory environments and deliver successful outcomes.
Room for Service Expansion
While clients are generally satisfied, there is a mention of potential service expansion into other areas, suggesting a desire for broader service offerings from Secureleap.
Effective Project Management
Clients commend Secureleap for excellent project management, highlighting their ability to meet deadlines, communicate clearly, and adapt to client needs. Their proactive approach and responsiveness ensure projects are completed on time and within budget.
Hands-On Approach and Business Understanding
Clients value Secureleap's hands-on approach and their ability to understand and integrate business needs with security requirements. This balance ensures practical and effective solutions that align with client goals.
Positive Client Relationships
The team at Secureleap is noted for pleasant and friendly interactions, both with vendors and clients. This rapport contributes to a strong working relationship and a positive overall experience.
Valuable Knowledge Transfer and Guidance
Secureleap excels in transferring knowledge to internal teams, enhancing their ability to manage security and compliance independently. Clients appreciate the practical guidance that supports continuous improvement.
“Overall, we had a very positive experience working with SecureLeap."
Oct 30, 2026
Compliance Manager, Automaise, SA
Patrícia Silva
Verified
Information technology
Braga, Portugal
51-200 Employees
Online Review
Verified
Secureleap helped a technology company implement SOC 2 Type II. They helped establish, implement, and document controls and procedures to meet the applicable Trust Services Criteria.
Secureleap's work resulted in the successful completion of the SOC 2 Type II audit, meeting all requirements. Their team demonstrated excellent project management, clear communication, and a proactive approach. They were flexible, responsive, and committed to the client's success.
The client submitted this review online.
BACKGROUND
Please describe your company and position.
I am the Compliance Manager of Automaise, SA
Describe what your company does in a single sentence.
Automaise is a technology company that develops intelligent solutions to automate processes and optimise customer experience through Artificial Intelligence and other advanced technologies.
OPPORTUNITY / CHALLENGE
What specific goals or objectives did you hire Secureleap to accomplish?
We hired SecureLeap to guide and support us throughout the entire SOC 2 Type II implementation process, ensuring its successful completion and achievement of compliance.
SOLUTION
How did you find Secureleap?
Referral
Why did you select Secureleap over others?
Great culture fit
Good value for cost
Referred to me
Describe the scope of work in detail. Please include a summary of key deliverables.
SecureLeap provided end-to-end guidance and support throughout the SOC 2 Type II implementation process, helping us establish, implement and document the necessary controls and procedures to meet the applicable Trust Services Criteria. Key deliverables included support with the implementation of security policies and controls, evidence collection and documentation, gap identification and remediation, audit preparation, and ongoing guidance throughout the process, ultimately contributing to the successful completion of the SOC 2 Type II audit.
RESULTS & FEEDBACK
What were the measurable outcomes from the project that demonstrate progress or success?
The successful completion of the SOC 2 Type II audit, resulting in a favourable audit report and confirmation that the implemented controls met the applicable requirements. The project enabled Automaise to achieve SOC 2 Type II compliance, strengthen its security and compliance framework, and enhance customer trust and confidence in its services.
Describe their project management. Did they deliver items on time? How did they respond to your needs?
SecureLeap demonstrated excellent project management, maintaining clear communication, a proactive approach and close follow-up throughout the process. They consistently met deadlines, adapted to our needs and provided timely, effective support whenever challenges arose. Their flexibility, responsiveness and commitment were key to completing the SOC 2 Type II implementation successfully and on schedule.
What was your primary form of communication with Secureleap?
Email or Messaging App
What did you find most impressive or unique about this company?
What stood out most was their expertise, hands-on approach and genuine commitment to our success. SecureLeap combined strong technical knowledge with a practical, solution-oriented mindset, making a complex compliance process much smoother. Their availability, flexibility and ability to anticipate our needs made them a valuable partner throughout the journey.
Are there any areas for improvement or something Secureleap could have done differently?
Overall, we had a very positive experience working with SecureLeap. We have no significant areas for improvement to highlight, as they consistently met our expectations and provided excellent support throughout the project.
RATINGS
5.0
Quality
5.0
Service & Deliverables
Schedule
5.0
On time / deadlines
Cost
5.0
Value / within estimates
Willing to Refer
5.0
NPS
CISO & Cybersecurity Compliance for Voice AI Solutions Co
“Our experience working with SecureLeap has been very positive.”
Oct 30, 2026
Founder, SentiVue
Mo Hani
Verified
Information technology
Portugal
1-10 Employees
Online Review
Verified
Secureleap provides virtual CISO services and cybersecurity compliance consulting for a voice AI solutions company. They support the client's security strategy, risk management, and regulatory requirements.
Secureleap has helped the client make tangible improvements in managing cybersecurity and compliance. They've provided a clearer understanding of cybersecurity risks, stronger security governance, and improved compliance readiness. The team is approachable, responsive, and communicative.
The client submitted this review online.
BACKGROUND
Please describe your company and position.
I am the Founder of SentiVue
Describe what your company does in a single sentence.
SentiVue develops voice AI solutions for real-time speech translation, multilingual AI agents and live event translation, helping businesses communicate across language barriers.
OPPORTUNITY / CHALLENGE
What specific goals or objectives did you hire Secureleap to accomplish?
Establish ongoing cybersecurity leadership through vCISO services to guide our security strategy, governance, risk management and technical decisions.
Assess our cybersecurity risks and compliance requirements, identify gaps and establish a practical roadmap for security policies, controls and continuous improvement.
Strengthen our security posture and ability to meet enterprise customer security and compliance requirements as our business grows.
Strengthen our GDPR compliance and data protection practices through guidance on privacy governance, personal data processing, retention policies, risk assessments and appropriate technical and organisational safeguards.
SOLUTION
How did you find Secureleap?
Online Search
Why did you select Secureleap over others?
High ratings
Pricing fit our budget
Great culture fit
Good value for cost
Company values aligned
How many teammates from Secureleap were assigned to this project?
1 Employee
Describe the scope of work in detail. Please include a summary of key deliverables.
SecureLeap provides SentiVue with ongoing virtual CISO (vCISO) services and cybersecurity compliance consulting, supporting our security strategy, governance, risk management and regulatory requirements.
RESULTS & FEEDBACK
What were the measurable outcomes from the project that demonstrate progress or success?
SecureLeap's involvement has helped us make tangible improvements to how we manage cybersecurity and compliance across SentiVue.
The key outcomes include:
Clearer security priorities: We have a better understanding of our cybersecurity risks, with a more structured approach to prioritising and addressing them.
Stronger security governance: Ongoing vCISO support has improved how we evaluate security requirements, make decisions and coordinate security improvements across our team.
Improved compliance readiness: We have clearer direction on regulatory requirements, including GDPR, and the technical and organisational measures needed to address them.
Better enterprise customer readiness: We are better equipped to respond to security questionnaires, compliance assessments and due diligence requests from enterprise customers.
Ongoing security oversight: Having experienced cybersecurity leadership involved in our decisions has helped us maintain consistent attention to security as our technology and business evolve.
Overall, the engagement has helped us move towards a more structured, proactive approach to cybersecurity, with clearer priorities and practical guidance to support our continued growth.
Describe their project management. Did they deliver items on time? How did they respond to your needs?
Our experience working with SecureLeap has been very positive. Marçal is approachable, responsive and communicates clearly throughout the engagement.
He works directly with our leadership and technical teams, takes the time to understand our requirements and provides practical recommendations that we can act on.
As this is an ongoing vCISO and compliance consulting engagement, priorities evolve alongside our business and security needs. Marçal has been flexible in accommodating these changes, helping us focus on what matters most and providing guidance when new requirements arise.
Overall, the collaboration has been well organised, with clear communication and a practical approach to addressing our needs.
What was your primary form of communication with Secureleap?
Virtual Meeting
Email or Messaging App
What did you find most impressive or unique about this company?
What stands out most about SecureLeap is their ability to combine deep cybersecurity and compliance expertise with a genuine understanding of business and technology.
Marçal goes beyond identifying risks or recommending controls. He takes the time to understand our business, challenges our thinking when needed and helps us make informed decisions that balance security, compliance and practical business requirements.
What I particularly value is his hands-on approach and accessibility. Having someone with his experience acting as our vCISO feels like having an experienced security leader within our own team rather than working with an external consultant.
That combination of technical depth, practical judgement and personal involvement is what makes SecureLeap stand out. A very positive experience overall. SecureLeap has been a valuable partner in strengthening our cybersecurity governance, compliance practices and ongoing security leadership.
Are there any areas for improvement or something Secureleap could have done differently?
Nothing significant comes to mind. Our experience with SecureLeap has been very positive, and Marçal has consistently been receptive to our needs and feedback.
As our business grows and our security and compliance requirements evolve, we continue to refine priorities together. The collaboration has worked well, and we're happy with the level of expertise, communication and support we've received.
RATINGS
5.0
Quality
5.0
Service & Deliverables
Schedule
5.0
On time / deadlines
Cost
4.5
Value / within estimates
Willing to Refer
5.0
NPS
CISO Services for Software Development Company
Compliance ConsultingMarket Research
GDPR Compliance Consulting
Confidential
May - Dec. 2025
5.0
Quality
5.0
Schedule
5.0
Cost
5.0
Willing to Refer
5.0
"Their attention to detail was impressive."
Oct 30, 2026
CEO, Miraculous Equation Unipessoal Lda
Derick Smith
Verified
Information technology
Braga, Portugal
1-10 Employees
Online Review
Verified
Secureleap provided CISO services for a software development company. The team worked on compliance reviews and interacted with vendors.
Secureleap helped the client sign three distribution agreements with vendors and steadily increased sales engagements. The team transferred knowledge to internal staff, provided frequent feedback, and was proactive and attentive to detail.
The client submitted this review online.
BACKGROUND
Please describe your company and position.
I am the CEO of Miraculous Equation Unipessoal Lda
Describe what your company does in a single sentence.
We are a software developer and private venture studio. We run a media and marketing agency, a consultancy and we resell solutions in identity, security, and media.
OPPORTUNITY / CHALLENGE
What specific goals or objectives did you hire Secureleap to accomplish?
We required a fractional CISO
Consulting on compliance issues
SOLUTION
How did you find Secureleap?
Online Search
Why did you select Secureleap over others?
High ratings
Close to my geographic location
Great culture fit
Company values aligned
How many teammates from Secureleap were assigned to this project?
1 Employee
Describe the scope of work in detail. Please include a summary of key deliverables.
Fractional CISO (weekly time allocation)
Vendor interactions
Sales support (technical) as CISO
Compliance reviews
RESULTS & FEEDBACK
What were the measurable outcomes from the project that demonstrate progress or success?
Three signed distribution agreements with vendors
Steadily increasing (MoM) sales engagements
Knowledge transfer to internal staff
Describe their project management. Did they deliver items on time? How did they respond to your needs?
On time,
To specification/expectation
Within budget
What was your primary form of communication with Secureleap?
In-Person Meeting
Virtual Meeting
Email or Messaging App
What did you find most impressive or unique about this company?
Frequent feedback and advice (over and beyond contracted time)
Proactive interactions
Their attention to detail was impressive.
Pleasant and friendly interactions with vendors and clients (always)
Are there any areas for improvement or something Secureleap could have done differently?
Lateral expansion into other areas
RATINGS
5.0
Quality
5.0
Service & Deliverables
Schedule
5.0
On time / deadlines
Cost
5.0
Value / within estimates
Willing to Refer
5.0
NPS
Showing 1-3 of
3 Reviews
Our Story
SecureLeap started because fast-growing startups kept hitting the same wall: an enterprise buyer asks for SOC 2, ISO 27001 or a security leader on the call, and nobody owns security. Marçal Santos founded it in Porto in 2024, after 20+ years in security that include Director of Information Security at Aircall and BISO at Citibank. We build security programs your engineers will follow, run the audit with you, and stay on as your security owner.
What Sets Us Apart
Leadership, certification and testing in one
One partner runs your security program, your SOC 2 or ISO 27001 project and your penetration test. SOC 2 All-In puts the pentest and the auditor’s fee on one invoice, and we run SOC 2 and ISO 27001 in parallel when you sell in both the US and Europe.
Contact Secureleap
If you’re not seeing exactly what you need here, send this company a custom message.
You can talk about your project needs, price, and timeline to get started on your project.
Get connected to see updates from Secureleap like new case studies, latest reviews, their latest masterpieces in their portfolio, delivered straight to you.
